c3b65d9c5a85a876dbc85a870d4597aa

General

Target

c3b65d9c5a85a876dbc85a870d4597aa
Size

78KB
MD5

c3b65d9c5a85a876dbc85a870d4597aa
SHA1

d0dc42e0471aaa0d9aa7fcf303aca8a5fd6b570d
SHA256

9e4e68c8c9accfecaedd8cbfa33f56878f194d2456c7d9188c3fe69afc2e6c3c
SHA512

3127c4473d23ab42e36aab362f1a4c019f8fe27e8534f7d2d1b38f7d96e74e7295298e2b1dab4348b092c1f03c2f0926f63a29110fbb2612f84c1d509fe8013f
SSDEEP

1536:4UGYJByMVqOY5eUOQOC9B3j1h30qD2zOztlKspbaDYwLkRC:4leBHVqOHQjnxh30qDVztfmzIC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3b65d9c5a85a876dbc85a870d4597aa

Files

c3b65d9c5a85a876dbc85a870d4597aa
.exe windows:4 windows x86 arch:x86

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetTopWindow
IsWindowEnabled
GetMenu
TranslateMDISysAccel
SystemParametersInfoA
GetCursor
KillTimer
TrackPopupMenu
TranslateMessage

version

VerInstallFileA
GetFileVersionInfoSizeA

kernel32

GetDateFormatA
VirtualAlloc
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetDiskFreeSpaceA
GetCurrentProcessId
LoadLibraryA

comctl32

ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_Read
ImageList_Write
ImageList_GetBkColor
ImageList_DrawEx

Exports

Exports

h21pHC472@24
tcP_VaTaB0_T@12
kP7em
mMDeqUmeCWyuc2
JctS8uR
zUlUg6Etf
K3agxx__Y2zlIj@16
FCb4XB@20
_ivhEnv487u6tOF
_WLmN40Sjz8wLB@12
CTR_d_Vb9
_XFD3tDOAL@20
MQVDe@12
F2TuclnQ0@8
_a_wI8T55_U88@24
_3R2ng
_jk3QVQ
_KGeGuiNeC@12
_xiJ4XA_lK
8t96thmJ6epi
XG51uu0oSW7Mn
_QZutguymil1@8
ox2wq0Ck4Jsu9
_rZL7B
Vo_6Zm4LY7qY@20

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

Imports

user32

version

kernel32

comctl32

Exports

Exports

Sections

CODE Size: 14KB - Virtual size: 13KB

.data Size: 10KB - Virtual size: 9KB

.ihdata Size: 49KB - Virtual size: 49KB

.idata Size: 1024B - Virtual size: 882B

.thdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 14KB - Virtual size: 13KB

.data
Size: 10KB - Virtual size: 9KB

.ihdata
Size: 49KB - Virtual size: 49KB

.idata
Size: 1024B - Virtual size: 882B

.thdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB